Advanced Access Manager <= 3.2.1 - Unrestricted AJAX Actions allowing Privilege Escalation
2016-06-21 00:00
James GolovichStrategic Overview
StatusPatched in 3.2.2
Affected PluginAdvanced Access Manager – Access Governance for WordPress
Affected Version
< 3.2.2CVSS8.8High
CVE
N/AVulnerability Overview
The Advanced Access Manager plugin for WordPress does not use capability checks on any of its registered AJAX actions. This allows authenticated attackers with any privilege level, including subscribers, to perform actions including elevating their privileges to those of an administrator.
Technical Analysis
REMEDIATION: Update to version 3.2.2, or a newer patched version --- IDENTIFIER: CWE-285 (Improper Authorization) The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C